Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Zohocorp ManageEngine ADSelfService Plus 7001 Clear all filters
TI-2026-53049 CVE-2026-75791 · GHSA-xcf2-p4gr-c87c

Authentication bypass in Zohocorp ManageEngine ADSelfService Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01827 Published 2026-09-22 Fixed in 7001 CWE-306
TI-2026-52577 CVE-2026-74849 · GHSA-vwcx-qwxm-ffwg

Remote code execution in Zohocorp ManageEngine ADSelfService Plus

Priority MEDIUM 56

Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04611 Published 2026-09-22 Fixed in 7001 CWE-78